FTP File Check Failing #20
Description
FTP is not properly checking the content of static files. This was broken using "include" and "regex" type checking (md5 not tested). Example debug message:
Domain lookup: ftp.blue.ssig @10.0.10.40 (type A)
DNS Response: ftp.blue.ssig. 3600 IN A 10.0.10.30
Opening Connection to: 10.0.10.30:21
ANON
Will write to file /flag-1445098459.txt
new
connect
login
passive
binary
Reading file: '/pub/AcceptableUse.txt'
Read Complete
Contents:
If you are using our FTP server please be careful not
to read anything that does not belong to you!
Also, please be nice to everyone!
You are anonymous, so we don't know who you are.
Thus, we are working off of the honor system here!
ATTENTION
DO NOT MODIFY OR DELETE THIS FILE.
Checking file contents, should be MD5/Regex: /be nice/
Using regex check
Elapsed Time: 0.074730664 sec